Bump actions/setup-dotnet from 5.2.0 to 5.3.0

[dependabot]

Bumps actions/setup-dotnet from 5.2.0 to 5.3.0.

Release notes

Sourced from actions/setup-dotnet's releases.

v5.3.0

What's Changed

Enhancements

• Add dotnet-version: latest support with dotnet-channel input by @​mahabaleshwars in actions/setup-dotnet#730
• Support global.json's rollForward latest* variants by @​js6pak in actions/setup-dotnet#538
• Improve version resolution by @​akoeplinger in actions/setup-dotnet#560

Dependency Updates

• Upgrade @actions/* and fast-xml-parser dependencies by @​Copilot in actions/setup-dotnet#728
• Update install scripts to v2026.05.19 (preserve archive links) by @​MichaelSimons in actions/setup-dotnet#736
• Add rollForward note in README, improve proxy health check in e2e tests and bump version to v5.3.0 by @​priyagupta108 in actions/setup-dotnet#738

Bug Fixes

• Update Test Proxy job by @​priya-kinthali in actions/setup-dotnet#703

New Contributors

• @​Copilot made their first contribution in actions/setup-dotnet#728
• @​akoeplinger made their first contribution in actions/setup-dotnet#560
• @​MichaelSimons made their first contribution in actions/setup-dotnet#736
• @​js6pak made their first contribution in actions/setup-dotnet#538

Full Changelog: actions/setup-dotnet@v5...v5.3.0

Commits

• 9a946fd Add rollForward note in README, improve proxy health check in e2e tests and b...
• 98af08b Support global.json's rollForward latest* variants (#538)
• 8404272 Update install scripts to v2026.05.19 (#736)
• f1970f5 Don't download releases-index.json to resolve major version (#560)
• af9211b Add dotnet-version: latest support with dotnet-channel input (#730)
• df991ae chore: bump @actions/* and fast-xml-parser dependencies (#728)
• a66eefa CI: remove manual PowerShell install from test-proxy job (e2e-tests.yml) (#703)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/actions/setup-dotnet	9a946fdbd5fb07b82b2f5a4466058b876ab72bb2	🟢 5.5	Details Check Score Reason Maintained 🟢 5 7 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 Code-Review 🟢 10 all changesets reviewed Binary-Artifacts 🟢 10 no binaries found in the repo CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 9 security policy file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches SAST 🟢 8 SAST tool is not run on all commits -- score normalized to 8

Scanned Files

• .github/workflows/dotnet.yml

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (ea581ba) to head (312057d).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff            @@
##              main       #83   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            2         2           
  Lines           37        37           
  Branches         3         3           
=========================================
  Hits            37        37           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	5		0	0	0.05s
✅ ACTION	zizmor	5		0	0	1.68s
✅ EDITORCONFIG	editorconfig-checker	43		0	0	0.05s
✅ JSON	jsonlint	2		0	0	0.09s
✅ JSON	prettier	2		0	0	0.38s
✅ JSON	v8r	2		0	0	3.16s
✅ MARKDOWN	markdownlint	1		0	0	0.59s
✅ MARKDOWN	markdown-table-formatter	1		0	0	0.26s
✅ REPOSITORY	checkov	yes		no	no	19.21s
✅ REPOSITORY	gitleaks	yes		no	no	0.15s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	50.18s
✅ REPOSITORY	osv-scanner	yes		no	no	0.52s
✅ REPOSITORY	secretlint	yes		no	no	0.97s
✅ REPOSITORY	syft	yes		no	no	2.13s
✅ REPOSITORY	trivy-sbom	yes		no	no	2.28s
✅ REPOSITORY	trufflehog	yes		no	no	3.96s
✅ XML	xmllint	14		0	0	0.53s
✅ YAML	prettier	10		0	0	0.62s
✅ YAML	v8r	10		0	0	8.72s
✅ YAML	yamllint	10		0	0	0.5s

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Show us your support by starring ⭐ the repository